CVE Database
/

CVE-2020-14331

Back to search

CVE-2020-14331

Published: Sep 15, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

VendorProductVersions

n/a

Linux Kernel

affected
All versions of the Linux kernel

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now